Re: [Buildroot] [PATCH 1/1] package/apr-util: security bump to version 1.6.4

Fiona Klute via buildroot <[email protected]>
Newsgroups net.busybox.buildroot
Message-ID <[email protected]>
Am 06.08.26 um 23:08 schrieb Bernd Kuhls:
> https://archive.apache.org/dist/apr/Announcement-aprutil-1.x.html
> https://archive.apache.org/dist/apr/CHANGES-APR-UTIL-1.6
> 
> Fixes CVE-2025-49506, CVE-2026-32327, CVE-2026-34191, CVE-2026-34501 &
> CVE-2026-34502.
> 
> Signed-off-by: Bernd Kuhls <[email protected]>

Applied to master, thank you!

> ---
> Gitlab pipelines passed:
> https://gitlab.com/bkuhls/buildroot/-/commits/7ffe5d525f354be9be20f7c7abcf860b82f2547b
> 
>   package/apr-util/apr-util.hash | 4 ++--
>   package/apr-util/apr-util.mk   | 2 +-
>   2 files changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/package/apr-util/apr-util.hash b/package/apr-util/apr-util.hash
> index 7e2793cd77..b8fff95de6 100644
> --- a/package/apr-util/apr-util.hash
> +++ b/package/apr-util/apr-util.hash
> @@ -1,4 +1,4 @@
> -# From http://www.apache.org/dist/apr/apr-util-1.6.3.tar.bz2.sha256
> -sha256  a41076e3710746326c3945042994ad9a4fcac0ce0277dd8fea076fec3c9772b5  apr-util-1.6.3.tar.bz2
> +# From https://archive.apache.org/dist/apr/apr-util-1.6.4.tar.bz2.sha256
> +sha256  3e2ae08f40efa0c3701e54a954cefa08242de22a69f91a8ae44fc1e624ba309b  apr-util-1.6.4.tar.bz2
>   # Locally calculated
>   sha256  ef5609d18601645ad6fe22c6c122094be40e976725c1d0490778abacc836e7a2  LICENSE
> diff --git a/package/apr-util/apr-util.mk b/package/apr-util/apr-util.mk
> index 477db1c593..c11957bc56 100644
> --- a/package/apr-util/apr-util.mk
> +++ b/package/apr-util/apr-util.mk
> @@ -4,7 +4,7 @@
>   #
>   ################################################################################
>   
> -APR_UTIL_VERSION = 1.6.3
> +APR_UTIL_VERSION = 1.6.4
>   APR_UTIL_SOURCE = apr-util-$(APR_UTIL_VERSION).tar.bz2
>   APR_UTIL_SITE = https://archive.apache.org/dist/apr
>   APR_UTIL_LICENSE = Apache-2.0

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.